CVE Ape
CVE Ape is a fairly simple, free and open source tool which helps to find all registered at the National Vulnerability Database (NVD) list of Common Vulnerabilities and Exposures (CVEs). The tool creates a local copy of NVD and CVEs databases and allows to search for registered CVEs by package name, vendor name or over OS libs and packages listed in the package list. Main usage of this tool is to help with review of Linux based IOT devices, but could be also integrated at the CI/CD pipelines to maintain a better level of security. This is not a very precise tool because it is not checking any backports nor vendors if not supplied specifically. The tool is downloading and creating a local CVE database at ~/.cache/cve-ape/ folder. It can be used offline, but only after a first update as it has to create a database.
FEATURES
ALTERNATIVES
A tool that automatically audits website security by crawling an entire website and identifying vulnerabilities
A Capture The Flag (CTF) platform for testing computer security skills
tfsec is being replaced by Trivy, a more comprehensive open-source security solution
A disclosure of a bug found in Twitter's Vine and the process of procuring the source code.
OpenVAS is an open-source vulnerability scanner that provides extensive testing capabilities for identifying security weaknesses in networks and systems.
A script that checks for common best-practices around deploying Docker containers in production.
A presentation about the OWASP Top 10, a list of the most critical security risks to web applications.
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.